$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: 8oFtMYE+ar7BndXfgIYbo3d/YpbnSh9ZJkYJRml6no8= Subject key identifier: 93:A0:D1:DF:5E:8B:DB:F3:D9:C4:48:79:11:B5:43:B6:76:57:4E:CC Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 5D693D2FAFE54DD954742975A009D59F3DDCF9A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: 13 Signing time: Sat 16 May 2026 09:10:10 +0000 Manifest this update: Sat 16 May 2026 09:05:10 +0000 Manifest next update: Sun 17 May 2026 11:06:10 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) 3: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: VVXcEbqErCReqlTqpz1IJomFJ2cn7hMUVM2B1Oy4m5Y=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:69:3d:2f:af:e5:4d:d9:54:74:29:75:a0:09:d5:9f:3d:dc:f9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: May 16 09:05:10 2026 GMT Not After : May 17 11:06:10 2026 GMT Subject: CN=93A0D1DF5E8BDBF3D9C4487911B543B676574ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:b6:ab:e2:b9:68:4f:0a:5f:ae:9d:ec:71: 21:58:7e:13:21:f8:53:84:c4:a8:e5:b4:67:e4:90: 04:df:bc:e8:b0:20:65:56:e1:5c:c9:0d:c3:df:48: cf:b3:6c:44:e4:8b:42:67:63:12:2a:79:d9:f5:7a: 46:08:3e:d9:e2:4a:27:27:0a:73:5c:cc:b0:7e:ee: 00:30:3c:cd:d0:57:51:9e:85:5a:fc:09:cf:13:74: d2:c5:89:ff:1e:da:48:13:b3:5f:27:08:40:05:10: 61:95:08:a3:84:14:f8:b7:57:10:e9:67:b7:39:69: e1:89:ca:7b:40:ca:ac:63:95:e8:74:c1:f2:71:63: af:54:be:aa:9e:3e:bc:a6:50:d0:b7:57:76:69:c7: ca:6f:74:b1:c0:ea:5c:94:a5:f6:c1:4c:8a:ba:39: 0e:d0:8d:1e:21:5c:84:62:c5:4b:65:7a:63:d5:7c: 37:7f:fb:35:18:d0:ed:f8:4d:80:0b:f5:9d:2d:8d: 1a:9b:a7:da:51:fd:de:a9:98:db:fb:07:36:48:74: 03:53:c3:d2:05:c0:10:98:e6:7a:1f:33:40:b0:74: 8c:d8:59:f4:26:ed:e3:09:6a:83:ca:8e:91:c5:71: 72:3a:07:99:76:9a:33:2b:5c:b7:7f:b8:63:8a:63: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:D1:DF:5E:8B:DB:F3:D9:C4:48:79:11:B5:43:B6:76:57:4E:CC X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:50:64:33:43:90:de:a0:2a:70:c5:22:9a:37:be:a0:4f: 77:23:e9:46:f3:42:b0:f4:c6:f2:16:04:69:2d:06:18:25:fb: 0e:05:b7:37:cd:56:4b:0b:7b:8e:a4:97:0b:9a:e5:00:8a:e3: 85:60:65:59:7b:20:45:c6:30:9c:98:b7:ff:3e:44:b3:17:f8: 9a:e8:a4:60:be:35:a6:05:d4:c1:32:8e:ce:27:39:92:98:cc: 2f:49:68:3e:ab:60:27:ac:10:88:1f:00:4a:41:d7:dc:bc:e2: ff:05:ef:e2:27:b0:d0:f1:5d:e1:bd:68:6e:bc:b8:9f:05:e2: 08:f2:c2:ac:95:b0:3f:58:b3:5d:7a:a6:ac:32:c7:25:f8:ad: a6:1c:e6:7c:de:c9:4b:c4:16:71:13:58:db:c8:a4:22:c8:b0: 27:14:83:28:5d:73:18:35:65:23:db:55:df:7a:58:49:42:c8: 5b:2e:e4:95:5a:89:7b:10:07:33:88:1e:a3:e7:9f:f6:89:35: 5a:f4:c0:b1:83:c9:79:6c:a3:64:2c:ac:85:ac:68:35:65:9d: 7a:5c:2c:1e:5f:d7:30:af:3b:65:94:6e:41:1f:79:b4:e5:4d: be:4a:cc:26:ca:a9:fa:aa:6c:82:00:6b:d8:d9:6f:44:c2:e8: 47:e4:7d:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWk9L6/lTdlUdCl1oAnVnz3c+aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjA1MTYwOTA1MTBaFw0yNjA1MTcxMTA2MTBaMDMxMTAvBgNV BAMTKDkzQTBEMURGNUU4QkRCRjNEOUM0NDg3OTExQjU0M0I2NzY1NzRFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTLar4rloTwpfrp3scSFYfhMh +FOExKjltGfkkATfvOiwIGVW4VzJDcPfSM+zbETki0JnYxIqedn1ekYIPtniSicn CnNczLB+7gAwPM3QV1GehVr8Cc8TdNLFif8e2kgTs18nCEAFEGGVCKOEFPi3VxDp Z7c5aeGJyntAyqxjleh0wfJxY69UvqqePrymUNC3V3Zpx8pvdLHA6lyUpfbBTIq6 OQ7QjR4hXIRixUtlemPVfDd/+zUY0O34TYAL9Z0tjRqbp9pR/d6pmNv7BzZIdANT w9IFwBCY5nofM0CwdIzYWfQm7eMJaoPKjpHFcXI6B5l2mjMrXLd/uGOKY3rvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6DR316L2/PZxEh5EbVDtnZXTswwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATVUGQzQ5DeoCpwxSKaN76gT3cj6UbzQrD0 xvIWBGktBhgl+w4FtzfNVksLe46klwua5QCK44VgZVl7IEXGMJyYt/8+RLMX+Jro pGC+NaYF1MEyjs4nOZKYzC9JaD6rYCesEIgfAEpB19y84v8F7+InsNDxXeG9aG68 uJ8F4gjywqyVsD9Ys116pqwyxyX4raYc5nzeyUvEFnETWNvIpCLIsCcUgyhdcxg1 ZSPbVd96WElCyFsu5JVaiXsQBzOIHqPnn/aJNVr0wLGDyXlso2QsrIWsaDVlnXpc LB5f1zCvO2WUbkEfebTlTb5KzCbKqfqqbIIAa9jZb0TC6Efkfeo= -----END CERTIFICATE-----Generated at Sat May 16 15:35:10 2026 by rpki-client